Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/144A943A1F6211F0BB229CEBDAE4EC9C.roa
File: 144A943A1F6211F0BB229CEBDAE4EC9C.roa (raw, json)
Hash identifier: ZX3IOJLD9X9O0l3cUdxEz9xFG11LZLynAT5rmFqQPk8=
Subject key identifier: 14:08:2D:9B:1D:1F:1E:EC:3C:DC:C4:04:DF:B3:3D:07:4A:CF:E1:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/144A943A1F6211F0BB229CEBDAE4EC9C.roa
Signing time: Tue 22 Apr 2025 10:10:56 +0000
ROA not before: Tue 22 Apr 2025 10:10:51 +0000
ROA not after: Tue 10 Mar 2026 10:10:51 +0000
asID: 140227
IP address blocks: 156.240.104.0/24 maxlen: 24
156.240.105.0/24 maxlen: 24
156.240.106.0/24 maxlen: 24
156.240.107.0/24 maxlen: 24
156.240.108.0/24 maxlen: 24
156.240.109.0/24 maxlen: 24
156.240.110.0/24 maxlen: 24
156.240.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85515 (0x14e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 10:10:51 2025 GMT
Not After : Mar 10 10:10:51 2026 GMT
Subject: CN=68076b30-1f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:82:89:df:39:8c:92:bc:b5:17:1f:2f:af:8e:
38:f0:fd:0d:7f:b1:ef:22:1d:78:ac:29:68:12:cd:
f0:b0:12:fb:4e:4b:dc:04:e5:96:b9:16:0b:40:f3:
e3:9a:7e:9e:6e:ff:17:39:68:2b:36:73:1b:56:ae:
eb:a1:cb:e6:b3:2b:dd:bc:6a:30:85:06:56:ba:cc:
fa:a6:1d:a6:bf:c5:42:73:d1:73:9d:01:4e:ff:b7:
97:a2:58:e8:fa:30:17:70:8e:0c:82:3b:94:ee:4a:
34:59:b3:e1:1c:7f:8d:24:76:f7:0b:6b:f0:f4:30:
d6:80:c3:2d:57:04:92:41:30:8e:d5:18:4a:06:ac:
39:a1:6b:27:42:4e:07:e5:0a:63:1f:71:6d:78:17:
0f:12:56:1a:67:51:69:21:fa:59:a4:11:d5:e1:d5:
32:ca:26:c3:ab:16:b8:da:1b:5f:0b:e9:46:78:07:
b2:ef:da:99:09:52:8d:30:35:b8:10:aa:83:4a:8e:
c8:71:3d:f6:17:ca:dd:ab:2b:c9:64:da:29:bf:95:
28:34:2c:2f:32:59:de:3b:0b:7d:b2:f7:41:78:0b:
da:e8:d7:c3:5f:bf:9a:78:e9:53:bd:9d:80:f0:2b:
b0:bc:20:aa:9e:d2:0c:75:44:ff:6c:52:e8:03:8c:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:2D:9B:1D:1F:1E:EC:3C:DC:C4:04:DF:B3:3D:07:4A:CF:E1:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/144A943A1F6211F0BB229CEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.104.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:10:e8:63:5c:fb:b9:29:58:4e:66:ea:48:07:42:c9:c3:87:
3c:4a:4b:2f:2e:33:7d:33:72:96:8f:d3:99:33:6b:fc:dc:58:
7b:51:c5:3a:12:52:46:44:92:00:52:ca:91:4f:df:4e:95:fc:
94:33:93:d1:a6:3a:1b:91:6e:9b:6d:0b:ee:9f:3c:b4:7d:a1:
ae:cb:31:04:ca:fc:b5:33:b6:28:40:51:dc:24:c3:0d:a3:53:
a1:97:bc:39:81:6e:4b:46:8c:78:1b:17:04:2c:e0:77:09:d6:
8d:f4:a3:61:3d:41:8c:b9:d2:42:47:0f:33:61:e8:37:09:5a:
de:d2:9d:34:a5:14:f0:1b:0b:5d:ee:72:ee:a1:9e:a1:d8:7b:
ce:93:e1:ad:5c:1a:95:ae:3b:a6:ec:79:27:a2:c8:21:e6:42:
75:ef:e8:91:1f:13:12:5b:9a:74:64:98:1d:8d:bc:00:b4:87:
3a:d8:99:e9:d3:bf:b5:be:ef:b1:72:6c:15:41:0d:d8:c9:66:
25:99:ce:02:74:3e:10:fd:e4:10:1a:9d:c3:b7:4c:59:b8:22:
68:2e:08:e8:e1:2f:05:a9:25:07:20:0c:08:a6:e5:a8:f3:f6:
06:c0:f6:bb:e2:e7:4a:a0:62:51:f8:be:28:38:08:f7:6b:38:
92:69:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:40:33 2025 by rpki-client